$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa File: 4fb98992-a216-3f6d-9adf-e8be7318839a.roa (raw, json) Hash identifier: CyCsNLS/quyLbUygU0RvKwAIsamXJ9+AUwFhtvqqG+Q= Subject key identifier: B9:4F:41:AE:C0:C1:8E:53:9A:8D:FF:D3:61:C5:7B:F0:67:48:86:C9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1D7084B5BC30DEE7B00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 158.222.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:d7:08:4b:5b:c3:0d:ee:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=acedd47c-157a-4f45-a1d1-91d29cb4bcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:8c:eb:52:e8:b0:28:68:1e:f0:51:94:68: 54:0d:bf:f9:86:79:2c:18:89:05:b7:38:3e:17:f7: 59:96:b8:09:71:54:37:c9:ba:96:0d:2e:fc:80:82: 24:87:78:08:b9:12:62:42:83:4d:c8:d0:bd:49:a8: 46:97:28:dd:fa:13:27:80:e0:b2:f4:7b:7c:11:ed: a5:bc:99:43:f5:9c:27:30:fb:b7:e7:18:38:b6:74: ed:54:af:ca:db:94:5e:12:a5:c5:c1:fe:e5:02:5a: 09:40:da:34:c5:b2:eb:22:f3:cb:ff:ac:2c:6d:ac: 8c:b7:d1:b7:a5:84:63:7b:0d:92:de:9e:72:37:8e: 95:34:40:97:76:ea:52:89:81:d7:df:00:04:54:e1: 48:27:f5:c1:72:bc:f9:39:eb:d0:89:41:f1:fd:37: 1b:ac:4b:d1:56:be:bb:04:93:51:b4:2c:67:3c:69: 1d:9d:08:0b:1e:60:90:72:7e:ac:d9:e8:9a:23:2b: ff:ae:d3:1c:2c:e8:1b:07:6a:12:6b:5f:28:1d:14: 8b:ee:b7:dd:ac:e6:c5:55:9f:d9:ea:af:55:10:67: 67:48:8d:23:06:b0:fe:01:9d:9c:cd:d7:1a:c8:ba: 01:31:74:a8:e6:ee:62:52:94:c7:51:f2:f8:c9:43: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4F:41:AE:C0:C1:8E:53:9A:8D:FF:D3:61:C5:7B:F0:67:48:86:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 158.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f2:7a:9f:90:a6:37:39:8d:6c:35:90:45:d2:12:ce:cc:ec: 39:91:cb:82:6b:c2:36:e4:0e:b6:a3:1d:5e:7c:f7:1e:e0:aa: 0b:90:8d:fb:ad:ea:ad:2d:b9:aa:28:f2:79:9b:2d:c8:41:47: 81:b3:6c:1e:45:86:94:1e:e9:98:b2:fd:b9:c2:b2:d1:44:d3: 8a:73:6e:f1:48:29:82:a2:17:26:9b:5d:2e:30:54:e1:18:05: bf:b3:40:6a:bf:7a:21:a0:97:ca:20:bc:88:24:67:8d:31:b4: 1d:6e:18:3f:89:bf:ac:e5:21:a5:41:5b:63:6b:77:53:3b:b7: b8:6f:5b:35:14:94:e7:ee:83:42:71:fa:28:dd:3f:c6:19:f0: 17:57:d8:09:21:8f:a2:c5:3b:12:78:d7:24:c5:73:a5:89:3c: 30:02:3a:9c:03:0e:ae:76:00:4c:ce:15:4f:03:07:b1:fd:e8: 58:54:8b:5d:78:f2:af:e1:6f:9f:93:fc:da:5b:b2:80:9e:15: 7a:df:79:80:88:39:e0:e9:ac:82:fc:71:e2:8d:48:c1:37:ff: 32:48:32:fd:9e:60:98:4d:56:96:f1:ea:aa:97:72:d9:81:31: 4a:ea:9e:06:44:50:c1:c0:f3:32:54:35:d0:32:50:47:35:3f: 3b:98:d5:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sHXCEtbww3uewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWNlZGQ0N2MtMTU3YS00ZjQ1LWExZDEtOTFkMjljYjRiY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S6M61LosChoHvBRlGhUDb/5hnksGIkFtzg+ F/dZlrgJcVQ3ybqWDS78gIIkh3gIuRJiQoNNyNC9SahGlyjd+hMngOCy9Ht8Ee2l vJlD9ZwnMPu35xg4tnTtVK/K25ReEqXFwf7lAloJQNo0xbLrIvPL/6wsbayMt9G3 pYRjew2S3p5yN46VNECXdupSiYHX3wAEVOFIJ/XBcrz5OevQiUHx/TcbrEvRVr67 BJNRtCxnPGkdnQgLHmCQcn6s2eiaIyv/rtMcLOgbB2oSa18oHRSL7rfdrObFVZ/Z 6q9VEGdnSI0jBrD+AZ2czdcayLoBMXSo5u5iUpTHUfL4yUONPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlPQa7AwY5Tmo3/02HFe/BnSIbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGZiOTg5OTItYTIxNi0z ZjZkLTlhZGYtZThiZTczMTg4MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnt5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3yep+Qpjc5jWw1kEXSEs7M7DmRy4JrwjbkDrajHV589x7gqguQjfut 6q0tuaoo8nmbLchBR4GzbB5FhpQe6Ziy/bnCstFE04pzbvFIKYKiFyabXS4wVOEY Bb+zQGq/eiGgl8ogvIgkZ40xtB1uGD+Jv6zlIaVBW2Nrd1M7t7hvWzUUlOfug0Jx +ijdP8YZ8BdX2Akhj6LFOxJ41yTFc6WJPDACOpwDDq52AEzOFU8DB7H96FhUi114 8q/hb5+T/NpbsoCeFXrfeYCIOeDprIL8ceKNSME3/zJIMv2eYJhNVpbx6qqXctmB MUrqngZEUMHA8zJUNdAyUEc1PzuY1Sw= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:56 2025 by rpki-client